Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: EFrswOkpXSYTxXYE0tExwF6PpEVqe/sLzKGJAWtdjNE=
Subject key identifier: FA:0A:3B:78:81:83:F2:0D:F4:6E:F2:34:90:B2:61:98:4C:ED:C4:BF
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 0199233156CC8F9791B9A6DEB7A6A364331C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 1411
Signing time: Sun 07 Sep 2025 08:00:59 +0000
Manifest this update: Sun 07 Sep 2025 08:00:59 +0000
Manifest next update: Mon 08 Sep 2025 08:00:59 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: lhiBAuNxe47s2ViHALe9h368UNSBWLTfhj7D+PID5EY=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:56:cc:8f:97:91:b9:a6:de:b7:a6:a3:64:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Sep 7 08:00:59 2025 GMT
Not After : Sep 8 08:00:59 2025 GMT
Subject: CN=fa0a3b788183f20df46ef23490b261984cedc4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6e:2f:a4:fe:2c:61:6e:a0:75:9a:92:63:2c:
83:c0:1e:2f:9e:31:3f:53:92:0a:96:b9:78:02:b9:
79:58:c9:34:4b:28:aa:04:99:1d:57:ed:a2:e9:f0:
16:f4:f1:a8:17:83:99:55:e4:c1:83:a4:99:57:11:
80:bb:eb:14:e9:3d:af:15:14:73:aa:23:e9:ac:75:
60:c4:54:ff:40:14:52:82:69:a7:ce:bd:c2:9d:b4:
81:d4:a7:7e:ee:aa:70:b3:b1:2d:9f:53:55:6b:11:
d3:94:49:ab:f7:31:2e:f3:1b:79:ce:e4:a6:d3:7a:
d6:fc:34:01:71:38:6a:c8:42:67:2b:f7:ea:c2:4f:
c2:0a:70:7d:c1:e7:09:f0:98:12:d2:06:8f:cb:83:
d5:d5:88:35:c2:51:54:6c:f8:d6:cd:dd:b5:47:54:
1b:a7:df:64:14:c3:b2:ec:4b:b9:d4:4c:86:b2:1c:
12:12:40:a4:5e:e0:01:6f:d8:78:45:c9:67:1b:bb:
9a:13:ee:64:0a:1b:10:c2:6a:77:0e:86:82:03:78:
9d:3f:f7:24:0f:3d:1c:c4:4d:5a:16:37:cb:f8:17:
63:c2:16:f5:f1:53:a3:58:d7:c8:1d:f7:64:44:49:
b2:b6:0c:d4:40:18:50:b5:0b:23:12:6d:26:33:d5:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:3B:78:81:83:F2:0D:F4:6E:F2:34:90:B2:61:98:4C:ED:C4:BF
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:49:22:25:fa:d2:d5:25:09:93:c0:16:cb:7d:4b:af:4a:e3:
7f:25:58:95:09:e1:94:be:a5:6f:87:fc:aa:cf:6c:a0:be:78:
8a:68:93:a0:d2:f3:99:ca:e2:54:ef:eb:90:12:40:ae:b2:a9:
70:62:7d:1b:45:65:ea:27:22:50:17:46:fa:95:c4:36:c2:3f:
16:9b:41:93:96:3b:66:81:fa:cc:ce:37:5d:ec:26:98:5b:51:
9f:e7:c7:51:33:a5:3b:18:5e:96:e9:08:0d:f6:3a:92:b1:39:
47:a8:08:f1:02:36:dd:93:2b:9c:82:60:c0:30:1e:c8:b6:d9:
32:fb:50:e5:bd:ea:99:7d:a1:8e:b8:a5:1d:e8:99:ec:47:63:
74:9d:e4:aa:f4:87:2a:0e:36:42:7d:fb:dd:6f:89:a0:b1:e5:
81:d5:d6:af:01:e6:69:bf:0c:3b:ac:68:95:c1:13:44:b6:f4:
59:a4:24:5d:17:25:78:88:84:73:6b:7b:81:6c:75:44:59:50:
86:4d:68:d8:6e:23:81:48:ed:5c:09:17:d9:79:c1:2e:2e:58:
7c:5b:10:0c:c3:68:5f:3f:e0:d3:79:b5:95:15:66:84:41:0b:
51:08:79:8d:6d:13:8d:94:63:3d:4e:bc:8f:08:39:02:7f:4f:
d0:f2:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:28 2025 by rpki-client